Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-5540

On F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.1.0, BIG-IQ Cloud and Orchestration

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
f5

Description

On F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.1.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.1.0-2.3.0 the big3d process does not irrevocably minimize group privileges at start up.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

F5 Networks, Inc. BIG-IP (DNS, GTM)

  • 13.0.0-13.0.1affected
  • 12.1.0-12.1.3.3affected
  • 11.6.0-11.6.3.1affected
  • 11.5.1-11.5.6affected

F5 Networks, Inc. Enterprise Manager

  • 3.1.1affected

F5 Networks, Inc. BIG-IQ Centralized Management

  • 5.0.0-5.1.0affected

F5 Networks, Inc. BIG-IQ Cloud and Orchestration

  • 1.0.0affected

F5 Networks, Inc. F5 iWorkflow

  • 2.1.0-2.3.0affected

References